GET Organizations endpoint should return OK with empty list, not 401 if user has access to ORT Server but no organization permissions

[mmurto]

Currently a newly created user will receive a 401 error from the front page of the UI, as the API returns 401 if the user can't read any organizations. The endpoint for listing organizations should rather return an OK response with empty list of organizations, as the user is authorized to list the organizations with an empty list, even if they don't have access to any single organization. This would make the experience for a newly created user better.

[sschuberth]

For transparency @hendrikebbers, this is something we'd like to address before your on-boarding.

[mnonnenmacher]

This should already be the case, I tried to reproduce it in a test but I couldn't, for a user with no organization permissions it returned 200 with an empty organization list.